4 ms·
By half-life do you mean the point at which you decide to renew the certificate prior to its actual expiry? Couldn’t you as a matter of policy decide to do this
by dambi0 2y ago
By half-life do you mean the point at which you decide to renew the certificate prior to its actual expiry? Couldn’t you as a matter of policy decide to do this at, say 45 days, even with a cert that lasts for a year? If so, then the change to 99 day expiry isn’t giving you any more options or flexibility, it’s actually removing it.